2 # The following are some default rules for devfs(5) mounts.
3 # The format is very simple. Empty lines and lines begining
4 # with a hash '#' are ignored. If the hash mark occurs anywhere
5 # other than the beginning of a line, it and any subsequent
6 # characters will be ignored. A line in between brackets '[]'
7 # denotes the beginning of a ruleset. In the brackets should
8 # be a name for the rule and its ruleset number. Any other lines
9 # will be considered to be the 'action' part of a rule
10 # passed to the devfs(8) command. These will be passed
11 # "as-is" to the devfs(8) command with the exception that
12 # any references to other rulesets will be expanded first. These
13 # references must include a dollar sign '$' in-front of the
14 # name to be expanded properly.
19 # Very basic and secure ruleset: Hide everything.
20 # Used as a basis for other rules.
22 [devfsrules_hide_all=1]
25 # Basic devices typically necessary.
26 # Requires: devfsrules_hide_all
28 [devfsrules_unhide_basic=2]
31 add path crypto unhide
32 add path random unhide
33 add path urandom unhide
35 # Devices typically needed to support logged-in users.
36 # Requires: devfsrules_hide_all
38 [devfsrules_unhide_login=3]
39 add path 'ptyp*' unhide
40 add path 'ptyq*' unhide
41 add path 'ptyr*' unhide
42 add path 'ptys*' unhide
43 add path 'ptyP*' unhide
44 add path 'ptyQ*' unhide
45 add path 'ptyR*' unhide
46 add path 'ptyS*' unhide
47 add path 'ttyp*' unhide
48 add path 'ttyq*' unhide
49 add path 'ttyr*' unhide
50 add path 'ttys*' unhide
51 add path 'ttyP*' unhide
52 add path 'ttyQ*' unhide
53 add path 'ttyR*' unhide
54 add path 'ttyS*' unhide
56 add path 'fd/*' unhide
58 add path stdout unhide
59 add path stderr unhide
61 # Devices usually found in a jail.
64 add include $devfsrules_hide_all
65 add include $devfsrules_unhide_basic
66 add include $devfsrules_unhide_login